[OpenSIPS-Devel] [OpenSIPS/opensips] c585e0: Fix buffer overflow in dnscache (#3669)

[Bogdan Andrei IANCU]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSIPS/opensips
  Commit: c585e0659254530cb4820676b7d44540ac3e52ec
      https://github.com/OpenSIPS/opensips/commit/c585e0659254530cb4820676b7d44540ac3e52ec
  Author: James Stanley <james at incoherency.co.uk>
  Date:   2025-06-12 (Thu, 12 Jun 2025)

  Changed paths:
    M modules/dns_cache/dns_cache.c

  Log Message:
  -----------
  Fix buffer overflow in dnscache (#3669)

`addr_no` and `alias_no` are calculated based on whichever is
smaller out of the actual number of addresses/aliases, and
`MAXADDRS-1`/`MAXALIASES-1`.

But then the code inserted all of the actual number of
addresses/aliases anyway, which makes for a potential buffer
overflow, and corrupted deserialisation later.


  Commit: 03719466e15d7ce7a30ef4434761886bd8d3ac37
      https://github.com/OpenSIPS/opensips/commit/03719466e15d7ce7a30ef4434761886bd8d3ac37
  Author: Bogdan Andrei IANCU <bogdan at opensips.org>
  Date:   2025-06-16 (Mon, 16 Jun 2025)

  Changed paths:
    M modules/dns_cache/dns_cache.c

  Log Message:
  -----------
  Merge pull request #3672 from jes/dnscache-fix

Fix buffer overflow in dnscache (#3669)


Compare: https://github.com/OpenSIPS/opensips/compare/45f498b18f75...03719466e15d

To unsubscribe from these emails, change your notification settings at https://github.com/OpenSIPS/opensips/settings/notifications